Static task
static1
Behavioral task
behavioral1
Sample
55b04f430f07401b737949ab9312fedb.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
55b04f430f07401b737949ab9312fedb.exe
Resource
win10v2004-20231215-en
General
-
Target
55b04f430f07401b737949ab9312fedb
-
Size
55KB
-
MD5
55b04f430f07401b737949ab9312fedb
-
SHA1
94c3ec474d5ff04c6cf9e7eb804c1c6545360e09
-
SHA256
66dfadb8a20f0045095b1bb3b65c4312f13cca4d8134e6a01119a810ed982039
-
SHA512
07131c180d31dc7cb4ca434bd511dc5ae7c557e3decfcd35b6d68f7abbea2c9670f9f11413ce441893c9619119e59c35a3f32f4977b558fa7634e82d1a343adb
-
SSDEEP
1536:YdW5k7dnbv4oNAckHKgj/+aHppf2G/XFUP4kN:oXnbv45R/+yppesXSf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55b04f430f07401b737949ab9312fedb
Files
-
55b04f430f07401b737949ab9312fedb.exe windows:4 windows x86 arch:x86
c76ad415ba4f8a09cbe7833ecf981485
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
lz32
LZClose
LZOpenFileA
LZCopy
kernel32
GlobalFree
CloseHandle
ExitProcess
LoadResource
GetCurrentProcess
WaitForSingleObject
GetTickCount
SetFileTime
GetCommandLineA
OpenProcess
FindResourceExA
SizeofResource
CreateProcessA
GetSystemDirectoryA
lstrcatA
lstrlenW
FlushFileBuffers
CreateDirectoryA
GetStartupInfoA
CopyFileA
LockResource
GetModuleFileNameA
GetVersionExA
LoadLibraryA
GetFileInformationByHandle
GetTempPathA
DeleteFileA
lstrcpyA
HeapFree
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
GetModuleHandleA
TerminateProcess
RtlUnwind
InterlockedExchange
VirtualQuery
GlobalAlloc
WriteFile
lstrlenA
CreateFileA
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTempFileNameA
GetCurrentProcessId
user32
wsprintfW
wsprintfA
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ